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Abstract. If D is the definite quaternion over Q of discriminant p, we 
compute, for any prime p > 3, the number of infinite dimensional cusp 
forms on D* which are trivial at infinity, tamely ramified at p, and have 
given conductor N away from p. We include a detail explanation of 
a Deuring-type correspondence between supersingular elliptic curves in 
characteristic p and a certain double coset arising from the adelic points 
of D*. 



Introduction 

Let p be a prime number, and D the quaternion algebra over Q ramified 
precisely at p and infinity. Let tt be an irreducible, unitary, automorphic 
representation of the multiplicative group D* of D. For a prime number £, let 
Tri be the local component of tt at £, and let ir^ be the component of tt at the 
archimedean place of Q. The representations tt p and vr^, of the respective 
local groups {D ® Q p )* and (D CED R)*, are both finite dimensional. In this 
paper we will only be concerned with those tt so that 

i) 7TQO is the trivial, one-dimensional representation; 

ii) TT p has a nonzero vector fixed by the maximal pro-p subgroup of D* 
Condition ii) can be interpreted as a tame ramification requirement for tt 
at p. For a given integer N > 1 not divisible by p, let A(p, N) denote 
the set of isomorphism classes of automorphic representations tt of D* of 
the type described above and whose prime-to-p conductor is equal to N. 
In this paper we obtain an explicit formula for the cardinality A(p, N) of 
A(p, N), and of some distinguished subsets (cf. Thm. |1.3|) . For simplicity p 
is assumed to be > 3. 

Associated to any irreducible, unitary, automorphic representation tt of 

D* there is a system of Hecke eigenvalues & T = (a£)^ pN , where i is a prime 

number not dividing pN, and N is an integer divisible by the prime-to-p part 

of the conductor of tt. When the central character x-k of tt has finite order 

(always the case if tt is trivial at infinity), then it is known that the ai are 

algebraic integers of a certain number field K(tt), and therefore, once a prime 

l 
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of Q above p is chosen, can be reduced mod p to obtain <l>(7r) = (ae)^ pN , a 
system of Hecke eigenvalues mod p. 

The tameness condition imposed to the automorphic forms ir is natu- 
ral when studying the reduction mod p of the totality of the systems of 
eigenvalues arising from cusp forms on D* trivial at infinity. A theorem 
of Serre relates these mod p systems of eigenvalues to those arising from 
mod p modular forms. In a forthcoming work, the author will adopt Serre's 
quaternionic viewpoint to estimate from above, using the formulas of this 
paper, the number of mod p Hecke eigenforms of given conductor. 

The author would like to express his gratitude to professor Chandrashekhar 
Khare for suggesting to him to perform these "quaternionic counts" , as well 
as for the assistance he has received. This work benefitted from many dis- 
cussions with professors Gordan Savin and Gebhard Bockle. The author 
heartily thanks them. In particular, it was professor Bockle who suggested 
to the author that it could have been possible to find an exact formula for 
A(p,N). 



1. Statement of the Theorem 

1.1. Generalities. Let p be a prime number, and D the quaternion algebra 
over Q ramified precisely at p and infinity. The multiplicative group D* of 
D is an algebraic group over Q that can be realized as a closed subgroup of 
GL4. For any commutative Q-algebra K, the group of -ff -valued points of 
D* is denoted by D* K . If K is also a topological algebra, then the embedding 
D* K C GL±{K) makes D* K a topological group. If v € Sq is any place of Q, 
and Qz, is the corresponding completion, we will write D* for Dq v ; when no 
confusion can arise we may simply write D* for Dq. A finite place v £ £q 
will often be denoted by its residual characteristic I. 

The group Dq sits inside the adelic group D* A as a discrete subgroup, the 
homogeneous space X = Dq\D a is locally compact and admits a measure 
dx that is invariant under the right translation action of D A . The center 
Z of D* , viewed as a closed, algebraic subgroup, is isomorphic to the mul- 
tiplicative group Q*, if tp : Za — > C* is a continuous Hecke character of 
finite order then the space L 2 (X, ip) is defined to be the space of measurable 
functions ip : D\ — > C such that: 

i) ¥>(70) = M, for all 7 € Dq, g € D* A ; 

ii) ip(gz) = ip(z)(p(g), for all z £ Z A , g G D* A ; 

m ) Ix/z A \f( x )? dx < °°- 
The space L 2 (X,ip) is a Hilbert space on which D A acts unitarily by right 
translation. The following fundamental theorem is proved in [6]: 
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Theorem 1.1. The unitary representation p^ of on L 2 (X,ip) decom- 
poses uniquely as the Hilbert direct sum 

i 

Pi> = 

of a countable collection 1^ of irreducible, pairwise non-isomorphic, subrep- 
resentations, each appearing with finite multiplicity. 

The next result is due to Jacquet-Langlands (cf. [ID], Prop. 11.1.1): 

Theorem 1.2. The multiplicity m(7r) of each constituent ir appearing in p^ 
is one. 

Any irreducible representation ir occurring in the above decomposition of 
p^, for some tp, will be referred to as a cusp form. 

In virtue of the tensor product Theorem (cf. [6j), any cusp form tt is 
isomorphic to a restricted tensor product of a unique family (^u)^^ °^ 
irreducible, unitary representations of the local groups D*. For any prime 
number I ^ p, there is an isomorphism D\ ~ GL^Q^), and for almost all I 
the local component tt£ of n defines a representation of GL^Q^) that is un- 
ramified. If tt is infinite dimensional, then it follows from the approximation 
theorem that for every prime v that is unramified in D the local component 
7r„ is also infinite dimensional. On the other hand, ir u is finite dimensional 
when v is equal to p or oo. 

If 7r is infinite dimensional and i ^ p, then the conductor c(tt£) is defined 
(cf. [3], §2.2, or [2]), and it will be thought of as a positive integer given by 
the appropriate power of £, instead that of an ideal of Z. By definition, the 
prime-to-p conductor N(ir) of tt is 

it is a well defined integer since ne is unramified for almost all I. 

We will be concerned only with those infinite dimensional cusp forms n 
such that 

i) 7TQO is the trivial, one-dimensional representation; 

ii) TT p has a nonzero vector fixed by the maximal pro-p subgroup of D*. 
In the next section we digress on the consequences of condition ii) on the 
nature of the unitary, local representations n p that may occur in the decom- 
position of TT. 

1.2. The local nature at p. The algebra D p = D <g) Q p is a quaternion, 
division algebra over Q p , it is unique up to isomorphism. On D p a valuation 
function is defined and the corresponding valuation ring O p is the unique 
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maximal, compact subring. It consists of all the elements that are integral 
over Zip. There is a unique maximal, two-sided ideal m of O p , which is 
principal and generated by any uniformizer w £ m. The residue field k 
is a degree 2 extension of F p , conjugation by any uniformizer x — > loxlo^ 1 
preserves O p and m, and induces the Probenius automorphism on k. The 
maximal pro-p subgroup of O* is the left term of the exact sequence 

l->-l + m — >0* — >k*-*l, 

and will be denoted by 0*(1). 

Let now tt p be an irreducible, unitary representation of D* on a finite 
dimensional complex vector space V. The subspace V of elements fixed 
by O p (l) is stable under D*. It follows that if ir p satisfies ii) then, by its 
irreducibility, we have V = V . The group k* acts on V' = V and there is a 
decomposition 

r?Gfc* 

into isotypical components indexed by complex valued characters of k* . For 
every such rj, the action of a uniformizer wonV induces an isomorphism of 
the summand V v with , its Frobenius conjugate. The irreducibility of 
7r p forces the following two possibilities: 

1) dimT/ = 1 and V = V 11 , for a character r) equal to its Frobenius 
conjugate rf\ 

2) dim V = 2, and V = V V ® V vP , with dim V v = dimy P = 1, for a pair 
of distinct characters (rj,rf). 

In the first case ir p is abelian and the character describing the action 
factors through the reduced norm map N p : D* — > Q* and can therefore be 
identified with a certain character of Q* that is tamely ramified, i.e., it 
is trivial on the units Z*(l) that are congruent to 1 mod p. 

In the second case, if w 6 D is the uniformizer such that w 2 = p, then 
w acts on V interchanging the two lines V v and V vP . Its square acts as 
multiplication by Xn p (p), where Xn p is the central character of ir p . 

1.3. Statement of the Theorem. For any integer N > 1 not divisible by 
p, we let A(p, N) denote the set of infinite dimensional, unitary cusp forms 
7T on D* occurring in L 2 (X,xjj), for some finite order character ip, satisfying 
i) and ii), and such that N(ir) = N. 

Let A\(p,N) (resp. A2(p,N)) be the subset of A(p,N) given by those 
cusp forms ir for which ir p is one dimensional (resp. two dimensional), and 
denote its cardinality by Ai(p,N) (resp. A2(p,N)). Moreover let Ao(p,N) 
be the subset of A\(p,N) given by the cusp forms tt so that ir p is trivial 
on O*, i.e., in the notation used in subsection |1.2| so that the associated 
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character e v : Q* — > C* is unramified. Let Aq(p,N) denote be its cardinal- 
ity. Theorem 11,31 below provides, for p > 3, closed formulas for Aq(p,N), 
Ai(p,JV) and A 2 (p,N). 

For an integer N > 1 not divisible by p, let A(p, N) be the function defined 
by the following table. Its value depends on iV and on the congruence class 
of p modulo 12. 



p mod 12 




1 


5 




7 
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N = 1 


(p 


-I? 


(p-l)(p + 15) 
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l)(p + ll) 


(p - 


-l)(p + 27) 






24 


24 




24 




24 


N = 2 





-I) 2 


(p-1) 2 


(p- 


-l)(p + 3) 





-l)(p + 3) 


N = 3 




8 



2(p - 1) 




8 





2(p- 1) 








3 
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N > 3 





















If /, g : Z>o — > Q are functions defined over the positive integer and 
valued in Q, then (/ * g) will denote their convolution. We say that / is 
multiplicative if /(l) = 1 and f(mn) = f(m)f(n) for all pairs of coprime 
positive integers m and n. The convolution product is associative, commu- 
tative and (/ * g) is multiplicative when / and g are. The Mobius function \i 
is the multiplicative function vanishing on integers that are not square free, 
and taking value —1 on every prime. For a prime £, and an integer n > 1, 
let r be multiplicative function defined by 



t - U 2 + 3 

i 2(n-3)( £ 2_ 1 y 



if n = 1 
if n = 2 
if n > 2 



Theorem 1.3. Lei p > 3 be a prime number. Then 

M p, N) = + - p(A0; 



A 2 (p,AT) 



24 

r(N)(p 



24 

r(N)p(p 



p — 1 

+ (A(p, _)*/i*/i)(JV)-(p-l)/i(JV); 



l) 2 (A(p,_)*p*p)(iV) 



48 2 
The convolution products in the theorem are performed with respect to 
the second variable of A. 

Corollary 1.4. Let p > 3 be a prime number, and N > 1 an integer not 
divisible by p. The dimension of the space of cuspidal newforms of weight 2 
on the group Ti(pN), with trivial character locally at p is equal to 

r(N)(p 



A Q (P,N) 



24 



1) (A(p,_)*p*M(AQ 
p-1 



M (iV). 



Proof. From the Jacquet-Langlands global correspondence (cf. [10], or |llj ) 
it follows that cusp forms of Ao(p, N) are in bijection with cusp forms ir on 
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GL2 of conductor pN, with archimedean component tt^ isomorphic to the 
principal series of lowest weight 2, and such that tt p is of Steinberg type at 
p with unramified central character. 

Since any form of conductor pN, and with unramified central character 
at p has to be of Steinberg type at p, the formula follows. □ 

2. AUTOMORPHIC FORMS ON D* 

We introduce here certain spaces S(l, N) of automorphic forms that inter- 
vene in the study of the cusp forms introduced in the previous section. They 
consist of locally constant functions on Dq\D' 1 ^ and they are independent 
on the archimedean variable £ D^. 

Let R be a maximal order of D, for a prime number I we set 

Ri = R® Z e ; 

Dt> = D ® = R e ® Q; 
where all tensor products are taken over Z. If £ ^ p the ring De is isomorphic 
to the algebra M2(Q^) of two-by-two matrices with entries in Q^, and we 
fix an identification De ~ M.2(Qe) such that Re corresponds to the standard 
maximal Z^-order M2(Z^). 

Let N be any integer > 1 not divisible by p, using the identification 
i?| ~ GL2(Z^) we define a congruence subgroup Ue(N) of R\ as follows 

U e (N) = L e GL 2 (Z e )\x = (* *j mod N 

We have that Ue = GL2(Z^) if and only if I does not divide N. The normal- 
izer U' t {N) of U e (N) in R\ is 

U'e{N) = jx € GL 2 (Z e )\x = *J mod n| , 

the quotient Ue(N)/U' e (N) is isomorphic to (Z e /NZ e )*. 

The ring 72 p is the unique maximal compact subring of D p , its residue field 
will be denoted by k, and the maximal pro-p subgroup of its multiplicative 
group by Rp(l) (cf. section [L2l) . 

Let U(l, N) be the open subgroup of D* A defined by 

U(l,N) = l[U e (N) xR* p (l) xJ4, 

and set 

(1) n(i,iv) = ^\z>i/?7(i,jv). 

This double coset is finite and discrete, since the space Dq\Dj^/ is 
compact. 
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Definition 2.1. The space S(1,N) of automorphic forms on D* of level 
(l,iV) and trivial at infinity is the space of functions / : 0(1, iV) — > C. 

Elements of S(1,N) are therefore complex valued functions on D* A that 
are invariant under translation by the discrete subgroup Dq to the left, and 
under translation by the open subgroup U(1,N) to the right. 

There are several operators on 5(1, AT) that we now describe. For any 
prime £ ^ p the £— th Hecke operator Ti is defined as follow. The double 

coset U((N) ^ ^\ Ue(N), considered as a subset of GL2(Q^), is the finite 

union of disjoint left cosets 

(2) U e (N)( e Q °)u e (N) = [_\ ai U e (N). 

^ ' i 

The number of left cosets in the above decomposition is £ + 1 if £ \ pN, and 
£ if £\N. If / G 5(1, AO, then T e (f) is defined by the formula 

(3) T i (f)(x) = Y / f(xa i ), 

i 

where «j G GL^Qf) — is considered an element of D* A thank to the 
natural embedding C D* A . It is clear from their definition that the 
operators Tg commute with each other. 

In section [6] the set 0(1, N) will be given a moduli interpretation in terms 
of supersingular elliptic curves. The Hecke operator corresponds to a 
certain averaging operator over degree £ isogenies (cf. section IBTo]) . It will 
be shown that: 

Lemma 2.2. If £\pN then Tg_ is a semisimple endomorphism of 5(1, iV). 

A consequence of the lemma is that 5(1, AT) decomposes into the direct 
sum of common eigenspaces for the T^, where £ \ pN . 
The normalizer of i/(l, N) in D A is 

u'(i,n) = 1[u^n)xd;xd* 00 , 

it acts naturally on 5(1, N) by right translation, and an action of 

u'(i, n)/u (i, n) = (z/Nzy x d;/r;(i) 

on 5(1, N) can be deduced. The automorphism of 5(1, N) determined by 
d G (Z/NZ)* is denoted by (d) and called diamond operator. 

The isomorphism class of the k* representation on 5(1, A 7 ") deduced from 
the action of D*/R*(l) will be determined in section [5j We will see that 
5(1, A 7 ) is close to be a multiple of the regular representation for k* . 
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We conclude the section describing an Hecke invariant subspace 5(1, 7V) Els 
of 5(1, N). 

Definition 2.3. The subspace of 5(1, N) given by those functions / : D A — >■ 
C that can be factored through the reduced norm map Nr : D* A — > A* is 
denoted by 5(l,iV) Eis . 

Fix now a character x : F* — > C* of order p — 1. 

Proposition 2.4. The space 5(l,iV) Els has dimension (p — 1) and is in- 
dependent of N. It has a basis (ei, . . . , e p _i) consisting of eigenvectors 
for all the Hecke operators Tg, with £ ^ p, such that if I \ pN we have 
T,{e l ) = {l + l) X - i (£)e l . 

The meaning of the first assertion is that 5(l,iV) Els defines a space of 
locally constant functions on D* A which has dimension (p — 1) and that is 
independent on N. 

Proof. Let 

A* = Q* x Z* x TL* >0 

be the canonical decomposition of A* into the product of the discrete sub- 
group Q* and the open subgroup Z* x R> - The image of the reduced 
norm map Nr : — > A* is the index two subgroup which, in the above 
decomposition of A*, corresponds to Q> x Z* x R> - The space 5(1, 7V) Els 
is identified with the space of functions 

/ : Q* >0 x Z* x R* >0 — > C 

that are invariant under the image of Dq ■ U(l,N) with respect to the 
reduced norm map Nr. Since 

Nr(-Dq • 17(1, N)) = Q* >0 x [] Z} x z;(l) x R* >0 , 

where Z*(l) is the subgroup of Z* of units that are congruent to 1 modulo 
p, the elements of 5(l,iV) Els are the functions on D* A that factor through 
the composition 

r • Nr : D A — > Q* >0 x Z* x R* >0 — > F;, 

where the fist map Nr is the reduced norm, and r is the projection onto the 
quotient group 

(q* >0 x z* x r* >0 ) / 1 q* >0 x H z* e x z;(i) x r^ J = f;. 

The first part of the proposition then follows. 
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To complete the proof, we construct an explicit basis for 5(1, A) 1S given 
by eigenvectors for all the Hecke operators Tg, with £ ^ p. For an integer j 
with 1 < j < p — 1, define ej £ 5(1, A) Els to be the composition ■ r ■ Nr. 
By the linear independence of characters, we have that (ei, . . . ,e p _i) is a 
basis of 5(1, iV) Els . Let now I \ pN be a prime number, and x 6 any 
element. By definition of Tg, we have 

(T eej )(x) = ^2ej(xai), 

i 

where the oti € C D* A are representatives for the double coset in formula 
([2]). Observe now that ej(xai) = ej(x)ej(ai), moreover ej(aj) = \ 3 ' r ' 
Nr(aj). For any a^, the idele Nr(aj) is 1 at every place other than the 
£™adic one, and it is equal to I at the £-adic place. It is easy to see that 
r ■ Nr(aj) = l~ l £ ¥*, therefore ej(oti) = xH^ 1 ) an d the proposition 
follows. □ 



3. Hecke eigenvalues and cusp forms 

We recall the details of the dictionary between systems of Hecke eigenval- 
ues arising from the module 5(1, N) introduced in the previous section, and 
unitary cusp form on D* satisfying conditions i) and ii). In this correspon- 
dence, the strong multiplicity one result for L 2 (X,tp) plays an important 
role. 

Definition 3.1. A system of Hecke eigenvalues arising from 5(1, N) is a 
collection $ = {at)^ pN of complex numbers such that there exists a nonzero 
element / € 5(1, N) with Ti(f) = a^f for all primes I \ pN. 

For a system of eigenvalues $ we define the corresponding isotypical com- 
ponent of 5(1, iV) as 

S(l,N)* = {f€S(l,N)\T t (f) = a t f, for all £\pN}. 
According to lemma [221 there is a decomposition 

5(1, iV) = 05(1, AO* 

of 5(1, A) into the direct sum of its isotypical components. Since the ac- 
tion on 5(1, A) by right translation of the normalizer U'(1,N) of U(l, N) 
commutes with that of Tp, for all primes £ \ pN, each summand 5(1, A) is 
a representation of U'(l, N)/U (1, A) = (Z/AZ)* x D* p /R* p {l). 

Let now tt be an element of A(p, A); that is, ir is an infinite dimensional, 
unitary cusp form on D* of conductor A, and satisfying conditions i) and 
ii), which occurs on a closed subspace V(7r) of L 2 (X,ip), for some central 
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character ip whose conductor divides N. Associated to tt there is a system 
of Hecke eigenvalues = (o-i)^ pN - 

Proposition 3.2. The space V(ir) f) 5(1, A) is non empty. For every prime 
£ \ pN the operator Tg acts on on V(ir) n 5(1, A) via multiplication by a 
certain scalar a^. 

By definition, the collection <l>(7r) = [ai)m pN is the system of eigenvalues 
associated to tt. 

Proof. The space V(tt) is isomorphic to a restricted tensor product ®'V(tt() 
of local representations, where we may disregard the trivial component at 
infinity. It follows that the space V(tt) u ^' n ^ of U(l, iV)-invariant vectors is 
the restricted tensor product 

For any £ \ pN the representation tt£ is unramified, and the space V(ni) Ut ^^ 
is one-dimensional (cf. [3], §2.2). The Hecke operator Ti acts on it as scalar 
multiplication, the proposition follows. □ 

A consequence of the strong multiplicity one result for L 2 (A, ?/;), as we 
shall see below, is that in fact the space V{tt) D 5(1, A) coincide with the 
full isotypical component 5(1, A")*^. 

Conversely, to any system of eigenvalues $ occurring in S(1,N) one can 
attach a cusp form tt(*) on D* as follow. Let / G 5(1, N) be any nonzero 
automorphic form, and set 

L\X,N)= L 2 (X,V0- 
V>e(z/7vz)* 

Consider the smallest closed subspace Vf of L 2 (X, N) that contains / and is 
stable under D* A , and denote by ttj the corresponding unitary representation 
of D\ . The following proposition is a standard consequence of the strong 
multiplicity one result for L 2 (X,N) (cf. [2], Thm. 2): 

Proposition 3.3. The representation ttj is irreducible and defines a cusp 
form on D* . The space Vf U ^' N ^ of U (1, N) -invariant vectors coincide with 
S(1,N)® , and Vf depends only on <I> ; and not on the choice of / / G 
5(1, AO*. The action of (Z/NZ)* on 5(1, N) is via homotheties specified 
by a character t/j : (Z/NZ)* -> C*. The action of D*/R*{1) on 5(1, A)* 
is isomorphic to a multiple of (7T/)„> where (7T/) is the local component at 
p of tt j , moreover p G D* acts on 5(1, A)* as multiplication by ^o(p) _1 . 
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The cusp form ttj and the Hilbert space Vf will also be denoted by 7r$ and 
V$, respectively. The central character -0$ of 7r<j, is obtained by composing 
the natural map 

A* — ► Z* — ► (Z/iVZ)* 

with the character given by the Proposition 13.31 We have that 7r$ is an 
irreducible constituent of L 2 pT, ^$). 

The next lemma characterizes the automorphic functions / £ S(1,N) so 
that 7Ty is finite dimensional: 

Lemma 3.4. Let / € 5(1, iV) 6e an eigenvector for all the Hecke operator 
Ti, withl\pN. IfiTf is finite dimensional, then it is one-dimensional, and 
f e S(l,N) E[s . 

Proof. Let g € D* C D* A be any element, write g = g p g^ p \ where g p is 
the adelic element of D*^ whose only non-trivial component is the p-th 
component of g in D*. Then we have that 

(4) 7r f (g p )=7r f (g^f\ 

since 7Tj(-D*) is trivial. By assumption, for any I ^ p the local representation 
(TTf) e is described by a character, therefore equation (j4]) implies that the 
restriction to D* of the local representation (7Ty) is given described by a 
character. Now since (jrf) p is trivial on an open subgroup of D* and is 
described by a character on the dense subgroup D*, we have that (71/ ) is 
abelian and hence one-dimensional. It follows that / factors through the 
reduced norm map Nr : D* A — > A*. □ 

Together with Proposition 12. 4\ Lemma [3.41 implies that there are precisely 
{p — 1) systems of eigenvalues $ arising from S(l, N) and for which 7r$ is 
finite dimensional. Such have been explicitly described in Proposition EH 

Let now $ — (o-i)^ pN be a system of eigenvalues arising from S(l, N) such 
that the associated cusp form tt = 7r<j> is infinite dimensional. All the local 
components ire f° r ^ 7^ P are a ls° infinite dimensional, and the prime to p 
conductor of tt is denote by N(ir). 

Let t : Z>o — >• Z>o be the function whose value in n > is the number of 
all positive divisors of n. 

Lemma 3.5. The level N is divisible by N(ir), moreover 

dim{S{l,Nf) = dim(vr p ) • t{N/N{ir)). 

The lemma follows from a classical local result of Casselman (cf. [3] §2.2) 
and is the crucial ingredient that enables us to obtain a recursive formulas 
that the functions Ai(p, N) in the main theorem have to satisfy. 
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4. Recurrence relations 

Let 5(1, N) = ® ^S(l, N) 11 be the canonical decomposition of 5(1, iV) 
into isotypical components with respect to the action of k* = R*/R*(l). 
Consider the decomposition 

(5) 5(1, N) = ( 5(1, N) v ) 6(05(1, AO"), 

and denote by 5i(l, N) the first summand and by 52(1, N) the second one. 
We have that 5i(l,iV) is the largest submodule of 5(1, AO on which the 
action of D* is abelian. Lastly, denote the isotypical component of 5(1, iV) 
with respect to the trivial character of k* by 5o(l, iV). For i € {0; 1;2} let 
Ui(p,N) denote the dimension of 5j(l,iV). 

Proposition 4.1. For a prime p and an integer N > 1 not divisible by p 
we have 

(t*A (p,-))(N)=u (p,N)-l; 
(t*A 1 (p,.))(N)=u 1 (p,N)-(p-l); 
(t*A 2 (p,.))(N) = u 2 (p,N)/2. 

Here (t * Aj) denotes the convolution product between the multiplica- 
tive function t introduced right before Lemma 13.51 and the function iV — > 
Ai(p,N). 

Proof. Observe first that the subspaces 5o(l,iV), 5i(l,iV) and S2(l,N), 
just defined are invariant under the action of the Hecke operators Tg, for 
every prime i \ pN . This follows from the fact that, for any system of 
eigenvalues <&, the _D*-representation 5(1, iV) is a multiple m(7r$) of the 
local component at p of the cusp from 7r$ attached to 3> (cf. Prop. 13.31) . 
together with the analysis of the representation of k* that may arising from 
(7T$) p by restriction to R*. Again from proposition l3.31 we have that 5j(l, N) 
consists of the direct sum of a certain number of Hecke isotypical components 
5(1, AT) $ of 5(1, N). More precisely, 

5(1, AO* c5i(l,A0, if (tt*)_ is one-dimensional; 

5(1, A^)* C 52(1, AO, if (tt$) p is two-dimensional; 
furthermore, in the first case, we have that 5(1, A r )* C 5o(l,A0 precisely 
when the character of Q* describing (vr$) p is unramified. Another conse- 
quence of the same proposition is that 

5(1, A0 Eis C 5i(l, AO, and 5(1, A^) Eis n 5 (1, N) = C ■ e p _i, 
where e p _i is the constant function on D* A equal to 1 (cf. Prop. 12. 4ft . 
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Consider the decomposition 
(6) S 1 (l,N) = S(l,Nf is I Si(l,JV)*), 

0<d\N \N{<S>)=d J 

where the inner sum ranges through all the eigensystems <E> arising from 
5(1, iV) and giving rise to an infinite dimensional cusp form 7r$ whose local 
component at p is one dimensional, and whose prime-to-p conductor is equal 
to the given positive divisor d of N. 

Taking dimensions on both sides of ([6]), and using Proposition 12,41 and 
Lemma 13.51 we get 

Ul (p,N) = (p-l)+ t(N/d)A 1 (p,d). 

Q<d\N 

In an analogous way, since Sq(1,N) D S(l,N) Els is one-dimensional, we see 
that 

u (p,N) = l+ t(N/d)A (p,d). 

0<d\N 

Finally, working with the module S 2 (l, N), we have 

u 2 (p,N) = 2 Y t(N/d)A 2 (p,d). 

0<d\N 

The proposition follows. □ 

The relations involving the functions Ai (p, N) expressed by Proposition 
14.11 can be solved for the Ai(p,N). The inverse of t, with respect to the 
convolution product, is infact the square (/i * fj) of the Mobius function. A 
restatement of Proposition 14.11 is then 

Proposition 4.2. For a prime p and an integer N > 1 not divisible by p 
we have 

A (p, N) = (n*fi* u (p, -))(N) - fx(N); 
Ai(p, N) = {n * fi* m(p, _))(iV) - (p - l)fx(N); 
A 2 (p,N) = (fi*fi* U2 (p, -)){N)/2. 

Let 5 be the multiplicative function whose value at every integer n > 1 
is zero, and so that 5(1) = 1. In the restatement of Proposition 14.11 given 
by Proposition 14. 21 we used the fact that the convolution between \x and the 
constant function equal to 1 is 5, the identity for the convolution product. 

To complete the proof of Theorem ll.3[ we will find an explicit expression 
for Ui(p, N), for every prime p > 3, and every N > 1 not divisible by p. This 
task will be accomplished in section [5l where the isomorphism class of the 
/^-representation given by 5(1, N) will be determined. 
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5. The functions uq, ui and U2 

The double coset £1(1, N) introduced in equation ([I]) parametrizes (in a 
non-canonical way) supersingular elliptic curves in characteristic p with a 
certain extra structure. By exploiting this correspondence, we explicitly 
determine, for any prime p > 3 and any integer N > 1 not divisible by p, 
the isomorphism class of the linear representation of k* given by the complex 
space S(l, N). This results in providing formulas for the functions U{(p, N), 
thus completing the proof of Theorem 11.31 

Any supersingular elliptic curve E over k has a canonical and functorial 
model Eq over k specified by the requirement that the Frobenius endomor- 
phism of Eq relative to k is equal to multiplication by — p on the curve (cf. 
Thm. 16. ip . In particular we can deduce a fc-structure on the space to(-E')* 
of invariant 1-forms, dual to the tangent space to(-E) of E at 0, to which we 
will implicitly refer when speaking of an invariant form on E defined over 
k. The details of the next theorem are given in section [6] (cf. Thm. I6.11|) : 

Theorem 5.1. There is a correspondence between 0(1, JV") and the set of 

isomorphism classes of triples (E,u,x), where E is a supersingular elliptic 
curve over k, uj is a nonzero invariant 1-form on E defined over k, and 
x € E[N](k) is point of order N. The permutation action of k* on 0(1, JV) 
is that induced by the twisted action 

\.(E,u),x) = (E,X p u,x) 

by homotheties on the second entry of the triples considered. 

Remark 5.2. The introduction of the Frobenius-twist in the permutation 
action of k* as given in Theorem 15.11 results from the actual way we set up 
the correspondence. The correspondence can be normalized in a different 
way, and the twist can be removed. Observe nevertheless that the Frobenius- 
twisted permutation action of k* on 0(1, iV) is isomorphic to the untwisted 
action, induced by X.(E,u,x) = (E, \oj,x). This follows from the fact that 
there is a permutation action of D*/R*(l) on 0(1, N) extending that of k*. 

The following elementary lemma on (not necessarily supersingular) elliptic 
curves over a field of characteristic p will be used in the sequel. Here the 
assumption p > 3 plays a role. 

Lemma 5.3. Let E be an elliptic curve over a field k of characteristic p, 
and let We be the group of K-automorphisms of E. Ifp>3, then the group 
homomorphism do : We — > k* describing the natural action of We on the 
tangent space to(E) (resp. the cotangent space to(E)* ) of E atO is injective. 

Proof. Let a € We be such that the differential do(o~) is equal to 1. Then 
by the linearity of the differential with respect to the addition on E we have 
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c?o(idE — a) = 0. Therefore idE — a is either zero or an inseparable isogeny, 
in both cases p divides the degree of idE — For any pair of endomorphisms 
a, b of E over k, we have the Cauchy-Schwarz inequality (cf. [133, HI Cor. 
6.3, V Lem. 1.2) 

deg(a + b) < deg(a) + deg(6) + 2y / deg(a) deg(6). 

In particular deg(idE — ex) < 1 + 1 + 2 = 4, and its divisibility by p > 3 
implies that deg(idE — a) is zero, and a = ids- □ 

Remark 5.4. If E is a supersingular elliptic curve over k, then from the 
lemma and from the existence of the functorial fc-model Eq, it follows that 
the action of the group We of ^-automorphisms on to(-Eo)* is described by 
an injection We ► k* . 

Let E be an elliptic curve over k with automorphism group We- Since 
the characteristic p of k is assumed to be > 3, we have that We is cyclic of 
order 4, 6, or 2 according to whether je is 1728, 0, or none of the previous 
values respectively (cf.[13], III §10). The next lemma indicates when the 
two isomorphism classes of elliptic curves with extra automorphisms are 
supersingular. 

Lemma 5.5. If p > 3, then 1728 is a supersingular j -invariant if and only 
ifp = 3 mod 4, whereas occurs as a supersingular invariant precisely when 
p = 2 mod 3. 

Proof. Let E be an elliptic curve over k with je = 1728, and let i € Q be a 
primitive fourth root of unity. There exists an injective ring homomorphism 
Z[i] ^-t- Knd^E), sending % to one of the two automorphisms of E of order 
4, we can deduce an embedding Q(i) C End^E) <g> Q. If E is supersingular, 
then End^(-E) <8> Q is a quaternion algebra over Q that is ramified at p, 
therefore Q(i) (8) Q p is a field, equivalently Q(i) is not split at p. On the 
other hand if E is ordinary, then E{k) has a (unique) subgroup C of order p 
and we can deduce a non trivial ring homomorphism Z[i] — > End(C) = F„. 
Which is to say that p splits in Q(i), since it cannot ramify for p > 3. Since 
p splits in Q(i) if and only if p = 1 mod 4 we obtain the first part of the 
lemma. 

The second part is analogous, one has to replace the fourth root of unity 
i by a primitive sixth root of unity p E Q. □ 

Let now E be a supersingular elliptic curve over k. If AT is any integer 
> 1 with p \ N, define Ee(1, N) to be the set of isomorphisms classes of 
pairs (u, x), where a; is a nonzero invariant 1-form on E defined over k, and 
a; is a fc-valued point of E of order N. Two such pairs (uj,x) and (r],y) are 
isomorphic if there exists u G We such that u.(u,x) := (u*U),u(x)) is equal 
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to (r],y). Let moreover 5^(1, N) be the set of complex valued functions on 
E E (1,N). 

The group k* permutes the elements of £.e(l,iV), the action is induced 

by 

X.(uj, x) = (Aw, x). 

The space Se{1, N) is therefore a linear representation of k* via the formula 

\.cp(u),x) = ip(X.(uj,x)). 
It follows from Theorem 15.11 that there is a decomposition 

5(1, iV) = QS E (1,N), 

E 

where the sum ranges through the isomorphism classes of supersingular el- 
liptic curves E over k. 

Consider now the set £#(iV) of isomorphisms classes of /c-valued points 
of E of order N, by which we mean the set of VF^-orbits given by points of 
E of order N. Let ati, . . . ,a r E E[N](k) be a system of representatives of 
T*e{N), and let ei, . . . , e r be the cardinalities of the subgroups of We given 
by the respective stabilizers. Notice that each a divides the order of k* , 
since We injects into k* (cf. Rmk. 15. 4p . 

If d is an integer dividing \k*\ = p 2 — 1 then set 

Id = lnd k c d l, 

where is the subgroup of k* of order d, and 1 denotes its trivial, one- 
dimensional complex representation. 

Lemma 5.6. There is an isomorphism 

S E (l,N)~ J ei . 

l<t<r 

Proof. Using lemma 15.31 the group We will be identified with a subgroup 
of k*. Consider the permutation action of k* on Y*e(1,N). Any /c*-orbit 
can certainly be represented by elements of the form (ui,a.i). Moreover, if 
(w, ai) and (rj, at*) are in the same orbit then i = j. 

In order to prove the lemma it is then enough to show that the stabilizer 
of any class of E^(l,iV) represented by (u),ai) is the subgroup of k* of 
order e,. This follows readily from the fact that for A G k* we have that 
(Xu,ai) defines the same element as (w, a») does if and only if there is an 
automorphism u G We such that 

u.(Xuj,ai) = (u},ai). 

Therefore uai = a, and A has to belong to the subgroup of k* given by the 
subgroup of We stabilizing ai . □ 
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If E is any elliptic curve over k, and N any integer not divisible by p, 
we compute the integers e±, . . . , e r . Let i/)(N) be the number of elements of 
(Z/NZ) 2 of order N. 

Lemma 5.7. The sequence of integers e±, . . . ,e r is given, up to permutation, 
by the following table: 





\W E \ = 2 


\W E \ = A 


= 6 


N = 1 


ex = 2 


d = 4 


e\ = 6 


N = 2 


ei = 2, r = 3 


ei = 2, e 2 = 4 


ei = 2 


N = 3 


^ = 1, r = 4 


ei = \,r = 2 


ei = 1, e 2 = 3 


N > 3 


ei = l,r = fP(N)/2 


e l = l,r = V(iV)/4 


^ = 1, r = ^(JV)/6 



Proof. If .E does not have extra automorphisms, then the action of W E 
on E[N](k) is by inversion, and the first column of the table is readily 
established, taking in account that V'(2) = 3 and that = 8. 

If \We\ = 4, and £ is a prime / p, then a generator a G H 7 ^; acts on 
the ^-adic Tate module Ti(E) of E via a Z^-linear, order 4 automorphism 
cr^. Let m = m aiL € GL2(Z^) be the matrix representing with respect to 
the choice of a Z^-basis of T^(E). Since m satisfies the polynomial x 2 + 1 
and it cannot act a scalar (for End^(E') injects into Endz^ (Tg(E))), we see 
that x 2 + 1 is its characteristic polynomial. If £ ^ 2, then the roots of the 
reduction mod £ of x 2 + 1 are distinct, therefore if iV is not a power of 2 
other than 1, the group We acts without fixed points on the fe-valued points 
of E of order N. 

Assume then that 1 = 2, and let m be given by 

'a b^ 
c d. 



m 



m = 



The mod 2 reduction mofm cannot be trivial, for £ dividing 1 — m would 
prevent m from having order 2, and rh has order 2. It follows that there 
is a basis (ei,e2) of T^{E) such that the matrix m representing cr^ has the 
entries a and d both divisible by 2. This implies that the pair [e\,oi ■ e±) is 
also a basis of T^{E), thus, up to conjugation, we can assume m be given by 

It now readily follows that an fixes a point of order iV = 2 n if and only if 
n < 2, moreover, the action of W E on points of order 2 is specified by the 
integers e± = 4 and e 2 = 2. This complete the proof of the statements in 
the second column of the table. The case \We\ = 6 can be treated similarly 
and the details are omitted. □ 

Remark 5.8. If E is one of the two elliptic curves over Q p with extra auto- 
morphisms, then E is known to have good reduction, since jg is an algebraic 
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integer (an integer, in fact). The special fiber E p at p is an elliptic curve 
over k with extra automorphisms, and the group Aut(-E) is identified with 
Aut(Ep) in a natural way (recall that p > 3). For t ^ p, the Tate modules 
Ti(E) and T((E P ) are isomorphic as modules over Aut(E') ~ Aut(E p ) and 
one could have proved Lemma 15.71 by reducing the calculation to the com- 
plex case, where the study of a simple picture leads to the computation of 
the integers in the table. 

The number of supersingular j-invariants characteristic p > 3 is given by 
a well-known formula due to Eichler and Deuring (cf. [7], §1): 



p mod 12 



h 

This formu 



1 



7 



11 



(p-l)/12 (p + 7)/12 (p + 5)/12 (p + 13)/12 
a, together with Lemmas 15.51 15-61 and 15.71 yields: 



Proposition 5.9. The isomorphism class of the linear representation S(l, N) 
of k* is specified by the following table: 



p mod 12 



1 


p 


- 1 






p 


-1 






p 





11 



p- 11 



N = 1 

N = 2 

N = 3 

A > 3 



h 
h 
h 



12 

P 



-h + h 
- 1 , 



p — 3 



n (p,AT) = ^(iV) 



P 



^i V<(A0 P 



/1 + /3 
1 . 



4 
P 



/2 + I4 

/ 2 + / 4 
- 1 



24 rv 7 24 

Moreover, we have: 

v p-l A(p,iV)_ 



V^(iV) 



-/1 
5 p^i 

24 ' 



/ 2 + / 6 + *4 



+ 

h+h 



24 

(P-I) 1 
24 



p — 1 

+ A(p,N); 



u 2 (p,N) = ^(N) {P 24 1} P - A(p,N). 

The second part of the proposition follows from the table in the first part, 
after an elementary (but a bit lengthy) calculation. The error term A(p, N) 
was defined in section [L3l 

By plugging the expressions for the functions Ui obtained in Proposition 
5.91 in the recurrence relation given by Poposition l4.H we see that the proof 
of Theorem 11.31 is complete, once that the equality (/i* fi*ip) = r is verified. 



6. An isogeny class of supersingular elliptic curves 

Let p be a prime number, and k a finite field with p 2 elements. The 
Honda-Tate theory of abelian varieties over finite fields guarantees the ex- 
istence of a fe-isogeny class C- p of elliptic curves over k whose objects A are 
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those for which the equality 

(7) ir A = -p 

holds in the ring Ench(^4) (cf. [H], Theoreme 1). Here tta ■ A — > A is 
the geometric Frobenius endomorphism of A relative to k, i.e., tta is the 
identity on the topological space underlying A, and is given by s — > on 
sections. Furthermore, for any such A the division algebra Endfc(vl) ® Q is 
"the" Q-quaternion ramified at p and infinity (cf. Tate, loc. cit.), and the 
elliptic curve A is super singular. In fact any supersingular elliptic curve over 
an algebraic closure k of k admits a canonical and functorial descent to C_ p . 
It can be shown that (cf. [I], Lemma 3.21 for a brief sketch of the proof): 

Theorem 6.1. The base extension functor A — > A 0k k induces an equiva- 
lence of categories between C- p and the isogeny class of supersingular elliptic 
curves over k. 

In this section we explain how isomorphism classes of objects of C— p , 
equipped with some extra structure, are parametrized by a certain double 
coset arising from the adelic points of the multiplicative group of the quater- 
nion algebra above. To describe such correspondence we make essential use 
of results of Tate (cf. [18] ; Thm. 6), describing the local structure at every 
prime £ of the module Hom/^A, B) of homomorphisms between two abelian 
varieties A, B over a finite field k. 

Since the correspondence is classical, this section will probably not appear 
in a more definitive version of this paper. We first learnt of this correspon- 
dence in [12] , what is included here is the outcome of our effort in under- 
standing all the details of its proof. Ghitza in [HJ explains, and generalizes, 
a correspondence very similar to the one considered here. Our method is 
similar to his. 

The notation adopted throughout the section is as follows. The Galois 
group of a fixed algebraic closure k of k over k is denoted by Gk- For 
an object A of C- p , and a prime number £, we let T^{A) denote the I— 
adic Tate module of A for £ ^ p, and the contravariant Dieudonne module 
attached to the p-divisible group of A for £ = p (cf. [17] . Ch. 1; 

[4J, Ch. III). For any prime £, we set V t (A) = T e (A) ®z t Q^- If I + P 
then Vi(A)/Ti(A) is identified with the Galois module ^4[^°°] of fc-valued 
points of A of £-power torsion. If ip : A — > B is a morphism in C_ p , then 
ipi : Ti(A) —7- Ti(B) denotes the corresponding morphism of Tate modules 
for £ p, and i\) v : T p (B) — > T p (A) that of Dieudonne modules. The 
morphism of Q£-vector spaces deduced from ip£ is denoted by V^tp), while 
■i/^ 00 ] denotes, for £ ^ p, the morphism from to 2?[^°°] induced by ip. 

It is a basic fact that ip ^ if and only if ipe is injective for some (all) £, 
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if and only if Ve(ijj) is an isomorphism for some (all) I. If tp is an isogeny, 
then ker^(^) denotes the finite subgroup of A given by the ^-primary part of 
ker(^). If I ^ p, then ker^^) will be identified with the Galois module given 
by coker(^), on the other hand coker(^ p ) is the finite length Dieudonne 
module associated to ker p (?/>)• 

6.1. The endomorphism ring. Let E be any object of C- p , denote the 
ring Endk(E) by R, and the Q-algebra Endfc(.E)<g>Q by D. If I is any prime 
number, set Re = R (g) Z^ and De = D ® Q^. As mentioned above, D is a 
central, division algebra over Q such that Dg is isomorphic to the matrix 
algebra JM^Q^) when £ ^ p, and to "the" central, division algebra over 
of rank four when £ = p. In this section we show that R is a maximal order 
of D or, equivalently, that Re is a maximal Z^-order in Dg, for all I. 

If £ is a prime 7^ p, then Te{E) is a free Z^-module of rank two on which 
Gk acts continuously and in a natural way. The action of the arithmetic 
Frobenius Frobfc £ on Te{E) is the same as that given by ttei, he., that 
induced by 7Te via functoriality of the Tate module. Therefore the Galois 
module structure of Tg{E) is specified by the requirement that Frobfc act as 
multiplication by —p. In particular we see that 

(8) End Ze[Gk] (T e (E)) = End Ze (T E (E)). 

The natural map : R — > Kndz e [G k ] (Te(E)) sending r G R into the induced 
morphism rg of Tate modules extends by continuity to a map on Re, also 
denote by t£. A special case of a theorem of Tate (cf. pj)] or [18]) yields: 

Theorem 6.2. The map L£ : Ri — > Endz^ (Te(E)) is an isomorphism, and 
Re is a maximal order of De ■ 

In order to study R p it is customary to work with the contravariant 
Dieudonne module T p [E) attached to the j)-divisible group of E. 

If W = W(k) is the ring of Witt vectors of k, recall that the Dieudonne ring 
A = Ak over k is the non-commutative, polynomial ring in two variables 
W[F, V] subject to the relations 

FV = VF = p; 

FX = X a F , V\ a = XV; 
where A 6 W is any element, and A — > A CT is the automorphism of W 
inducing the absolute Frobenius on the residue field k. Notice that in this 
special case where \k\ = p 2 we have that F and V have the same semi-linear 
behavior with respect to the action on W, since a = a^ 1 . 

The Dieudonne module T p (E) is a left ^4-module that is finite and free of 
rank two as VK-module. Equation ([7]) implies that F 2 acts as multiplication 
by —p, therefore the /c-semi-linear endomorphism of T p (E)/pT p (E) induced 
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by F is nonzero and nilpotent. Using this one shows that there exists a 
TU-basis (ei,e2) of T P (E) such that 

F(ei) = -pe 2 ; 

F(e 2 ) = ei; 

moreover we must have that V = —F (cf. [9] for more details). The nonzero 
„4-submodules of T p (E) that are VF-lattices of V P (E) are those given by 
F n T p (E), for n > 0. In terms of the arithmetic of E, this implies that 
every finite, closed subgroup of E of p-power rank is the kernel of a chain 
of successive, alternating applications of the absolute Frobenius morphisms 
Fe '■ E — > £?(p) and F E{p) : -> E^ = E. Notice that equation says 
that F E(p) F E = -p- 

The ring i? acts on the right of T p (E) by functoriality, and determines a 
ring homomorphism tj, : R op — > End^ (T p (E)) which extends by continuity 
to R p p . There is a version at p of Theorem (|6.2j) . also due to Tate (cf. [18], 
Thm. 6): 

Theorem 6.3. The map l p : R p p — > End_4(Tp(i?)) is an isomorphism. 

The ring R p p is thus identified with the ring of W-linear endomorphisms 
of T p (E) commuting with F. Using the coordinate system induced by the 
previous basis (ei,e 2 ) of T P (E), we readily compute that R p p is described 
by matrices of the form 

(a° -b\ 
\pb a a J ' 

where a, b £ W. Letting a and b vary in the degree two, unramified extension 
L = W[l/p] of Q p , leads to a matrix description of D p p = R p p <g>z p Qp 
whose trace (tr) and determinant (det) respectively give the reduced trace 
and reduced norm of D p p (cf. |16j . LI). The involution x tr(x) — x gives 
an isomorphism D p p — > D p , sending R p p to R p . Its effect on the matrix 
description is 

(a! 7 -b\ fa b\ 
\pb a a J > \-pb a a a ) ' 

The ring R p is the unique maximal order of D p as it consists of all the 
elements with both reduced trace and reduced norm valued in Z p . If v p : 
Q p — > Z U {oo} is the valuation of Q p , normalized in such a way that 
v p {p) = 1, then the function R 3 r — > v p (det(r)) G Z U {oo} has the 
formal properties of a discrete valuation (|16j. II. 1). Therefore R has a 
unique, two-sided, maximal, principal ideal m given by all the elements 
whose determinant belongs to (p) C Z p , and generated by element whose 
determinant generates (p) in Z p . The residue field R/m has order p 2 . 
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6.2. Isogenies in C_ p and ideals of Endfc(.E'). In this section we prove 
two theorems useful to describe a correspondece between isogenies of C_ p 
whose source is a fixed object E, and nonzero, left ideals of R = Endjt(-E). 
They both follow from the results of Tate that we already encountered. 
Let ip : E — >• E^ be any isogeny in C_ p , consider the -R-left ideal 

Ijf, = {r € R : r = r ip, for some r € Hom^(i?^, E)} 

consisting of all the endomorphisms of E trivial on the finite subgroup 
ker('0). Pull-back by ip gives an isomorphism ip* : H.om(E^,E) ^> 1^ 
of left -R-modules. Notice that L/, is a Z-lattice of D, since for example 
deg(V') G 1$. If is any prime, the module 1^ ® Tig will be denoted by I^ t g, 
it is a left ideal of Rg that is also a Z^-lattice of Dg. The isomorphism 
above induces an isomorphism Hom(^,£) ® Z^ — )• I^, tacitly used in 
what follows. 

Remark 6.4. From the maximality of Rg, it follows that Tw, g is principal for 
any prime £ (cf. [16] II. 1, II. 2). If I ^ p, there exists a Z^-lattice Ao of Vg(E) 
containing Tg(E) such that the isomorphism ig (cf. Thm. 16. 2p sends I^u g to 
the left ideal Endz £ (Ao, Tg(E)). In fact we will see that Ao is the pull-back 
of Tg(E^) via Vg(ip) (cf. proof of Thm. I6.5p . For £ = p, there exists a 
VF-lattice Mo in V P (E) contained in T p {E) such that the isomorphism t p (cf. 
Thm. 16. 3p sends I^ )P to the right ideal End^ (T P (E), Mo). From the proof 
of Theorem 16.51 it will follow that Mo is the isomorphic image of T p {E^,) 
with respect to V p (ip) : V P (E^) — > V P (E). For any £, the left ideal is 
generated by any of its elements of reduced norm with minimal valuation. 

Before showing that the isogeny ip can essentially be recovered from 1^ 
(cf. Thm. 16. 5p . we make a few observations. Let £ be a prime 7^ p, from the 
isogeny ip : — > E^ we can deduce a commutative diagram of -modules 
with exact rows 

Tg(E) Vg(E) E[£°°] 



4>e 



Tg{E^) Vg(E^) E f [£°°] 0. 

The pull-back of the Tate module Tg(E^) via the isomorphism Vg(ip) identi- 
fies the former with a Z^— lattice of Vg{E) containing Tg(E), and that will be 
denoted by A^ e . Under this identification, the map ipi clearly corresponds 
to the inclusion Tg(E) C A^ r Since the two rows of the diagram are exact, 
Vg(ip) induces an identification cdker(ipg) ~ ker(^[£°°]), or, equivalently, 



(9) 



A^ t /Tg{E) ~ ker £ (V0- 
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The Z^-lattice A^, depends on tp in a functorial way, in a sense that can be 
made precise by working with the category Ce that will be introduced in 
the next section. We observe that if <p : E — > E v is another isogeny, and u : 
— > E v is a morphism, then the map Ve ((p)~ 1 Ve(u)Ve(tp) : Vg(E) — > Vg(E) 
sends to h v and there is a commutative diagram 

A^, A^ 



T e (E^) 



T e (E„ 



where the vertical morphisms are the natural identifications. In particular, 
if u is an isogeny, the cokernel of the top horizontal map of the diagram is 
isomorphic to ker^(«) in a natural way. 

If i = p, the situation is formally analogous, after replacing the covariant 
Tate module by the contravariant Dieudonne module. The morphism if) p : 
T p {E^) — > Tp(E) identifies T P (E^) with an „4-submodule M^ p of T P (E) 
that is a W-lattice of V P (E). Moreover T p (E)/M 1 p p is the Dieudonne module 
associated to the finite group ker p (?/>)• As before, if ip : E — >■ E v is an isogeny 
E v is any morphism, then the map V^, (/;/>) VJ, (it) V^^) -1 : 
V P (E) sends M ipp to M^ p , there is a commutative diagram 



and u : E^ 
V P (E) 



M, 



M, 



Tp(E^) 



where the vertical morphisms are the natural identifications. Moreover the 
cokernel of the top horizontal map of the diagram is the Dieudonne module 
of kei p (u). 

Theorem 6.5. For any isogeny -ip : E — > E^ and any prime number t, there 
exists an isogeny r' : E^ — > E whose degree is prime to I. Equivalently, there 
exists an isogeny r 6 1^ so that ker£(r) = kere(ip). In particular, ker(?/>) 
coincides with the largest k-subgroup of E killed by every element of 1^. 

Proof. We begin by proving the theorem in the case I ^ p. Consider the 
commutative diagram 



Horn 



Hom Ze (T e {E f ),T e (E)) 



Homz^A^,^^)) 
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where the horizontal maps are induced by functoriality of the Tate module, 
and the vertical isomorphism on the right comes from the identification 

IT (E ) 

T t (E^) ~ and is given by ug -s> ugVg{ip)^^ * . 

Since Hom Zj [ Gfe ] (Tg (E^ ),Tg(E)) = Romz t (T i (E 7 p),Tg(E)), the main the- 
orem of [15] says that the top horizontal map of the previous diagram is 
an isomorphism, thus so is the bottom one and the isomorphism tg from 
Theorem 16,21 induces an identification of left ideals 

(10) I^ e ~Rom Ze (A^,Tg(E)). 

In particular, 1^ g = Rggg, where gg £ Dg is any element of Rg mapping 
A^ e isomorphically to Tg(E). If we pick r € such that its image rg G I^ g 
is a generator then ker^(r) = kdig(ip) by Q, since the lattices A re and A^ e 
in Vg(E) coincide. 

For t = p consider, in an analogous way, the commutative diagram 

Hom(^, E) ® Z p Rom_4 L (Tp(E),T p (E 1 p)) 



Ii>,p »- Hom^ (T p (E), M^ p ) 

where the horizontal maps are induced by functoriality of T p , and the vertical 
isomorphism on the right is given by u p — > ip p u p . Notice that the lower hori- 
zontal map is that induced by the anti-isomorphism t p : R p — > End_4 (T p (i?)) , 
where Hom A (T p (E) , M^ p ) is regarded in a natural way as a right ideal of 
End A (T p (E)). 

Since both horizontal maps are isomorphisms (cf. [TSj, Thm. 6), the 
principal left ideal iv, p of R p is generated by any element r p such that 
L p (r p ) defines an endomorphism of T P (E) sending T p {E) isomorphically to 
My . Choosing now r£ ^ such that r p £ Iy, p is a generator, we see that 
M Tp = My , therefore ker p (r) = ker p ('0) and the theorem follows. □ 

Let now / be a nonzero left ideal of R, consider the isogeny 

(11) V/ : E — > E/H(I), 

where 

H{I) = p| ker(r) 

r£l 

is the largest fc-subgroup of E that is killed by every element of I, and ipj 
is the canonical isogeny. The ideal I can be recovered from ipf. 

Theorem 6.6. For any nonzero left ideal I of R we have I = J^. 
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Proof. Let J = Jw )/ be the left ideal of R given by the endomorphisms of 
E trivial on H(I), certainly I C J. For any prime I, denote by Ig and Jg 
the left ideals of Rg obtained from / and J after tensoring with Zg. Since 
Ig C Je, it will be enough to show that Jg C Ig for any I. 

For I ^ p, as explained at the beginning of the section, the Tate module 
Tg{E/H(I)) is identified with the Z^-lattice e of Vg{E) containing Tg(E) 
and such that the equality 

^xl> I: tl T l(E) = ker^O/), 

holds in the ^-divisible group i^ 00 ]. Moreover, the isomorphism tg : Rg — > 
Endz (! (T£(£')) induces an identification Jg ~ Homz^A^ e ,Tg(E)), as was 
shown in the proof of Theorem 16.51 

On the other hand, Ig is a nonzero left ideal of Re = ~Endz e (Tg(E)) and 
there exists a Z^-lattice Ao of Vg(E), containing Tg(E), such that Ig = 
Homz £ (Ao, Tg(E)); since If C J<, we have Ao D A^ 7£ . 

Now, by definition of ipi we have 

ker^(^) = P) ker £ (r), 

or, reformulating, 

(12) A^= n Vt(r)-\T t (E)). 

The right hand side of (|12|) certainly contains Ao, therefore Ao C A^) and 

For 1 = p the proof is similar and is omitted. As in the case I ^ p, the key 
fact is that I p is known a priori to be principal, thanks to the maximality 
of R p (cf. Remark E3). □ 

Remark 6.7. Theorem 16.61 is a special case of a more general result of Wa- 
terhouse (cf. J7], Thm. 3.15). 

6.3. An equivalence of categories. We interpret the result of the previ- 
ous section in a formal way, by showing the existence of an anti-equivalence 
of categories (cf. Thm. 16. 8p . 

Let E be a fixed object of C_ p , and let Ce be the category of isogenics of 
C-p with source E, that is the category whose objects are isogenies in C_ p 
of the form ip : E — > E^, and whose sets of morphisms Hom(^, ip) between 
two objects is simply Hom^, E v ). 

Let ip : E — > E^ be any object of Ce, the natural identification 1^ = 
Hom(E^,E) = Hom(^, id^;) makes clear that 1^ depends functorially on 
ip; more precisely the assignment ip — > 1^ defines a contravariant functor X 
from C-p to the category V$ of projective left i?-modules of rank one. We 
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clarify that if u £ Horn (ip, ip) is a morphism in Ce, then I(u) : 1^ — > 1^ is 
constructed as follows. If r = r"<p £ 7^, consider the commutative diagram 

V 

E E *■ E 




the value of T{u) on r is the composition r"uip £ . 

From the results of the previous section we can draw the following conse- 
quence: 

Theorem 6.8. The functor I sending tp to 1^ induces an anti-equivalence 
of categories between Ce and V^p ■ 

Proof. We show that any object of is isomorphic to one of the form 
and that I is fullyfaithful. 
Any nonzero projective left i?-module P of rank one is isomorphic to a 
finitely generated, left i?-submodule of D, therefore to a nonzero left ideal 
I of R, after multiplication by a suitable integer N >1. From Theorem 16.61 
we see that every nonzero left ideal I of R is of the form 1-(ip), for some ^ 
in C E - 

To see that X is fullyfaithful, let ip and 92 be two objects of Ce, and 
/ : I(p — )■ iw, any morphism of left i?-modules. We have to show that there 
exists u £ Hom(?/>, v 9 ) such that / = X(u). Since 1^ and 1^ are lattices of D, 
f extends uniquely to an endomorphism of D, as left D-module, thus there is 
A £ D such that f{x) = xX, for all x £ 1^. Let N be an integer > 1 such that 
iVA £ R. Right multiplication by iVA on D clearly induces the morphism 
Nf : 1^ — > I^, and we will first show that there exists u' £ Hom(£^, E^) 
such that Z{v!) = Nf. 

For r = r"(p £ 1^ consider the commutative diagram 




E^ E v 

The existence of the dotted arrow r' follows from the fact that rNX be- 
longs to lip (in fact even to NI^), and hence factors as r'tp, for some 
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r' G Hom(Ew,, E). Showing that there exists v! G Hom(i?^,i7^) with 
I(u') = Nf amounts to proving that ipNX factors as u'tp, for a certain 
v! G Hom^,^). 

If A^A = this is clear, therefore we may assume that <*pN\ is an isogeny. 
By Theorem 16.51 we have that 

ker(y>ATA) = [\ ker(r"tpN\), 

r"GHom(_B v ,_E) 

but r"(pN\ = r'lp, therefore 

ker(^) C P) ker(r"tpNX). 

r"eHom(B ¥ ,E) 

The two equations readily imply ker(^) C ker(ipN\), which gives the desired 
factorization of ip N A as u'ip. 

A further application of Theorem 16.51 gives that u' is divisible by N in 
Hom(£^, Ey). In fact since r"u'ip G NI^, for r" G Hom(Ziy, E), we have 
that r"u' : E^ E is trivial on the subgroup E^[N]. Since this happens 
for all r" G Hom^,^) we see that, by Theorem 16.51 u> is itself trivial on 
E^[N], and v! = Nu for a unique u G Hom(£^, E v ). Therefore T{u) = 
N~ 1 Z(u') = /, this completes the proof of the theorem. □ 

6.4. Adelic description of C- p . The functor X introduced in the previous 
section admits an adelic description, thanks to the fact that Zw, is locally 
principal, for any ^ in Ce (cf. Remark 16. 4p . Let R denote R <g> Z and, 
similarly, D denote D Z, we have R = Y\Re and D = Y\De, where the 
product is taken over all the primes I. 

If ip is any object of Ce, and £ is any prime, then Z^ = Z?^, for some 
ge G Re', observe that gi G Z?|, since Z^ is a Z^-lattice of Z)^. The image 
of the adelic element {ge)e G R n Z?* in the coset space R*\R n Z)* depends 
only on ?/>, and not on the choices of the <?£, and is denoted by a^. 

Vicerversa, if a G R*\R n Z)* is represented by {gt) t £ R D £>*, then 
Z?^ = Re for almost all £, and there is a unique left ideal I a of R such that 
Zo,£ = Z a (g) Z^ is equal to Rege, for all I. The isogeny corresponding to I a 
will simply be denoted by ip a '■ E — > E^ a , it defines an element of Ce- 

If X is the set of isomorphism classes of objects of Ce, or of C_ p , a conse- 
quence of Theorem 16.81 is: 

Theorem 6.9. The assignment ip — > induces a correspondence 

t '. X — > R*\D*/D*. 

The surjectivity of r follows from the fact that the inclusion ROD* C D* 
induces a bijection ZT\Z? n D*/D* = R*\D*/D*. 
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Let now N > 1 be a fixed integer not divisible by p. If ifi : E — > E^ 
is an object of Ce, the tangent space to(-E^) of E^ at the origin is a one- 
dimensional /c-vector space, and its dual to (E^)* is identified with the space 
of invariant 1-form on E^ (defined over k). Consider the set £(l,iV) of 
isomorphism classes of triples (il>,oo,x) given by an object ij) : E — > E^ of 
Ce, a nonzero invariant 1-form u G tQ(E^)* , and a point x £ E^,[iV](A;) 
of order iV. The notion of isomorphism between two such triples is clear: 
(ip, a), x) is isomorphic to (99, rj, y) if and only if there exists an isomorphism 
u : Ejf, — > E v such that u*(rj) = co and u{x) = y. Notice that k* acts on 
N) via homotheties on the second entry of the triples. 

Choose now a nonzero 1-form ujq G to(-E')*, and an element xq G E[N](k) 
of order N. The ring R = Y\ Re acts on the left of the product 

t (E)*xl[E[e°°} 

by considering the natural action of Ri on for £ 7^ p, and on to(E)* 

for £ = p. Notice that the action of R p on to(E)* is given by a canonical ring 
homomorphism R p — > k, necessarily surjective because of the structure of 
R p , that will be used to identify the residue field R p /m with k. The kernel 
of the corresponding character R* — > k* is given by Rp(l), the subgroup of 
units congruent to 1 modulo the maximal, two sided ideal m. 

Let K(1,N) be the open subgroup of R which stabilizes the pair (ojq, xq). 
We have a decomposition 

K(l,N)=R* p (l) x ]jK e (N), 

for a certain collection i'Q(iV) of open subgroups of with £ ^ p. The 
subgroup R* of R normalizes K(l, N) and left translation induces an action 
of R*/Rp(l) = k* on the coset space K(1,N)\D*/D*. 

Remark 6.10. There is a Z^-basis (ei, e-i) of Ti(E), for £ 7^ p, such that the 
corresponding identification R* t ~ GL2(Z^) sends Ki(N) to the subgroup 

U e (Ny = L G GL 2 (Z £ )|x = (I *^modN|, 

which is the image of Ui(N) (cf. section [2j) with respect to the canonical 
involution 7. If £ e is the exact power of £ dividing N, the basis above should 
be chosen in such a way that the element of Tg(E) / (N) = E[£ e ](k) defined 
by e\ (mod N) is equal to the ^-primary component of xq. 

Theorem 6.11. There is a natural bijection 

t n : E(1,N) ^ K(1,N)\D*/D*. 
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The permutation action of k* on E(l,iV) corresponds via tn to the action 
induced by left translation of R* on K(l, N)\D*/D*. 

Proof. Let a G K(l, N)\R n D* be any element, we begin by showing how 
to construct a triple (tp a , u a , x a ) of the type considered out of a. Let I a 
be the left ideal of R defined by the adelic coset a € R*\R n D* deduced 
from a. The isogeny ifi a : E — > E^ a is that obtained from the I a using the 
construction (|lip from section HOI 

Let g = (ge) e £ fin D* be any element representing a, i.e., such that 
a = K(l,N)g. Recall that for i ^ p the module Ti{E^ a ) is identified 
with a Z^-lattice A^ a e of Vg{E) containing Tg(E), moreover gg G D\ is a 
generator of the principal, i?^— left ideal Homz € (A^, a e , Tg (E)), and defines an 
isomorphism of Vg{E) that maps A^ a , isomorphically to Tg{E). Therefore 
we deduce, for any n > 0, an identification 

(13) ^n(fc) = h+JiT) * T e (E)/(n = E[t)(k) 

depending on the choice of the generator gg of I^ t g. 

If now l e is the exact power of I dividing N, then the I— th primary 
component xo/ of xo is a point of order l e in Tg(E)/(£ e ). The inverse image 
£a,£ G A^ at /(£ e ) of xo,f by the identification (fT3l) for n = e is a point 
£ , ^, a [^ e ](fc) of order ^ e that depends only on the coset Kg(N)gt, as one can 
easily check. The point x a € E^ a [N](k) is the one whose £-th primary 
component is x a> g, and depends only on a, and not on g. 

To construct the invariant fc-form u a , we use the fact that for any object 
X of C-p there is a canonical identification of fc-vector spaces (cf. [5], II, 
Prop. 4.3) 

(14) T p (X)/FT p (X) = t (X)*. 

Recall that the Dieudonne module Tp(E 1 / Ja ) is identified, via V>a,P' to a ^4- 
submodule M^ a p of T P (E), moreover the component g p € D* at p of g defines 
a generator i p (g p ) of Hom^ (T p (l£), M^, a ) as a right ideal of Endj^(T p (E)). 
We have a commutative diagram of morphisms of ^.-modules 

tp(3p) 

T p (E) * — T p (£0 




The diagonal isomorphism to the right of the diagram is induced by the 
composition of t p (g p ) corestricted to M^ ap , followed by the inverse of the 
corestriction of ij} Pja to the same lattice of V P (E). Notice that it is not 
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independent on the choice of g p . From this isomorphism, using (|14|) . we can 
deduce an isomorphism of £;-vector spaces 

Ca ■ to(E)* ^ t (Eip a )* 

that depend only on the coset R*(l)g p , and not on the choice of g p , as one 
can easily check. Setting ui a to be equal to £ a (<^o) completes the construction 
of the triple (ip a ,co a ,x a ) attached to a = K(l,N)g £ K(1,N)\R D D*. 
We are left with showing that, for a, b € K(l, N)\R n D*, the triples 

(V' 

a , u) a , Xa) and (ipb, tdf,, Xj,) are isomorphic if and only if a — bX, for some 
A € D*. One way to proceed is to observe that in order for the two triples 
to be isomorphic certainly we must have that there exists an isomorphism 
u : E^ a — > E^ b , equivalently, by Proposition 16.91 if a, b denote the elements 
of R*\R(lD* deduced from, respectively, a and b, then there must be A € D* 
such that a = bX. We leave to the reader the task of showing, with the help 
of section 16.21 that the isomorphism u induces an isomorphism between 
(ip a ,uj a , x a ) and (r/jf^oj^xi,) if and only if a = bX. □ 

Remark 6.12. If d is an integer > 1, the natural map K(l, Nd)\D* / D* 
K(1,N)\D*/D* corresponds, under the identifications r^vd and r^y to the 
map sending a given triple (ip,ui,x) € T,(l,Nd) to (ip,co,dx) € E(l, JV). 

Remark 6.13. Once for each prime f / pa basis for Tg(E) as in Remark l6.10l 
is chosen, we have that the canonical involution 7 of D defines a bijection 

K(l,N)\D*/D* ^ n(l,JV), 

where 0(1, iV) is the double coset space introduced in section [2l The effect 
of the main involution of D p on the multiplicative group of the residue field 
is the Frobenus automorphism. This explains the occurrence of the twist 
for the action of k* as given in Theorem 15.1} which is just a restatement of 
Theorem 16.111 

6.5. Hecke operators. For an integer N > 1 not divisible by p, the space 
5(1, iV) defined in section[2]is identified, using Remark 16.131 following Theo- 
rem l5-H with the space of complex valued functions on S(l, N). Our task is 
now to investigate a few basic properties of the Hecke operators on S(1,N). 

Definition 6.14. Let £ be a prime 7^ p. The ^-th Hecke operator 1} on 
(9(1, N) is defined as 

Ti{f)(ip,u),x) = ^ /((?//, u/,x')), 

</> 

where the sum ranges through all the degree I isogenies ip : E^ — > E^i such 
that <p(x) has order N in E'^[N], and where remaining entries of the triple 
(ip',oj',x') are defined by ^>*{oj') = u, <p(x) = x' . 
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Proposition 6.15. If £\pN, then the Hecke operator Ti acting on 5(1, N) 
is semi-simple. 

Proof. Consider the real inner product on S{1, N) for which the basis given 
by the characteristic functions of the singletons of E(l, N) is orthonormal. 
A standard application of the existence of the dual isogeny shows that Ti, 
for £ \ pN commutes with its adjoint and is therefore semi-simple (cf. [7], 
Prop. 2.7). □ 

For £ p, consider the decomposition into right cosets of the double coset 

The number of left cosets in the above decomposition is £ + 1 if £ \ pN, and 
£ if £\N. Using the identification 

N) = I R* p (l) x J] U e (NY ) \D*/D*, 

one can show that the operator Tj? is described by: 
Proposition 6.16. For every £ ^ p we have 

W)(x) = ^/(a,x). 

i 

After applying the main involution, we now see that the definition of 
Ti given in section [2] corresponds to that given in this section under the 
bijection of Remark 16. 131 
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